In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix null pointer dereference in allocpreauthhash()
The Client send malformed smb2 negotiate request. ksmbd return error response. Subsequently, the client can send smb2 session setup even thought conn->preauthinfo is not allocated. This patch add KSMBDSESSNEEDSETUP status of connection to ignore session setup request if smb2 negotiate phase is not complete.
[
{
"id": "CVE-2025-22037-024ce9b6",
"digest": {
"line_hashes": [
"40640551838881666992412891435356750114",
"287445069216143970143252157146317153442",
"272432220197545348692215718554704739346",
"200796643468251471636356344036150090181",
"114625347888109672118197518536968378968",
"158215045584098059507582942883917511226",
"328299363384410295763884869006539661562",
"113803501980142141196269119362031329675",
"244647404035860198967322688899819607806",
"19240269759446072652502041473946465172"
],
"threshold": 0.9
},
"signature_type": "Line",
"target": {
"file": "fs/smb/server/connection.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cce57cd8c5dead24127cf2308fdd60fcad2d6ba6",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-04cd84ec",
"digest": {
"length": 5207.0,
"function_hash": "51044291861950428742294976349810516179"
},
"signature_type": "Function",
"target": {
"file": "fs/smb/server/smb2pdu.c",
"function": "smb2_sess_setup"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cce57cd8c5dead24127cf2308fdd60fcad2d6ba6",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-068839a4",
"digest": {
"line_hashes": [
"325448000465391200100892215415955313038",
"21027551650952136140564420539977572300",
"318944161087451046256217667886885275348",
"129819164659489964156793981930181478976",
"258441204198463208476705604174028848564",
"247942568155215386677883202851520230913",
"170526147657533789799389891840977733144",
"243301067770454264198809896844511470745",
"81851043980562522459033969244191262560"
],
"threshold": 0.9
},
"signature_type": "Line",
"target": {
"file": "fs/smb/server/mgmt/user_session.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8f216b33a5e1b3489c073b1ea1b3d7cb63c8dc4d",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-07f17215",
"digest": {
"line_hashes": [
"325448000465391200100892215415955313038",
"21027551650952136140564420539977572300",
"318944161087451046256217667886885275348",
"129819164659489964156793981930181478976",
"258441204198463208476705604174028848564",
"247942568155215386677883202851520230913",
"170526147657533789799389891840977733144",
"243301067770454264198809896844511470745",
"81851043980562522459033969244191262560"
],
"threshold": 0.9
},
"signature_type": "Line",
"target": {
"file": "fs/smb/server/mgmt/user_session.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c8b5b7c5da7d0c31c9b7190b4a7bba5281fc4780",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-09b7312b",
"digest": {
"length": 1181.0,
"function_hash": "166258855410913138801266803317107526426"
},
"signature_type": "Function",
"target": {
"file": "fs/smb/server/smb2pdu.c",
"function": "smb2_session_logoff"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b8eb243e670ecf30e91524dd12f7260dac07d335",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-0a4a6696",
"digest": {
"line_hashes": [
"325448000465391200100892215415955313038",
"21027551650952136140564420539977572300",
"318944161087451046256217667886885275348",
"129819164659489964156793981930181478976",
"258441204198463208476705604174028848564",
"247942568155215386677883202851520230913",
"170526147657533789799389891840977733144",
"243301067770454264198809896844511470745",
"81851043980562522459033969244191262560"
],
"threshold": 0.9
},
"signature_type": "Line",
"target": {
"file": "fs/smb/server/mgmt/user_session.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b8eb243e670ecf30e91524dd12f7260dac07d335",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-0ddd6001",
"digest": {
"line_hashes": [
"325448000465391200100892215415955313038",
"21027551650952136140564420539977572300",
"318944161087451046256217667886885275348",
"129819164659489964156793981930181478976",
"258441204198463208476705604174028848564",
"247942568155215386677883202851520230913",
"170526147657533789799389891840977733144",
"243301067770454264198809896844511470745",
"81851043980562522459033969244191262560"
],
"threshold": 0.9
},
"signature_type": "Line",
"target": {
"file": "fs/smb/server/mgmt/user_session.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca8bed31edf728a662ef9d6f39f50e7a7dc2b5ad",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-126a4c91",
"digest": {
"line_hashes": [
"297004126756288227908285474675522726703",
"268659658837504198401863032526307706032",
"51448650403117895317813221185544537069",
"289873519735553229074859803961269895940",
"237716553558632709093956764661326776463",
"130979960009992921730539082423788934756",
"217046446482590909808361427330581534764",
"249667312923185645835762253499634725836",
"335881720498473020984678720935303353685",
"335590987076451830758487913687396859075",
"327422833182963144665463407599434122618",
"54690712854944189062554638213604010981",
"267450405378082489665943207360784785230",
"87180532630101454121491995230000699392",
"195554818792450739061977712802667231779",
"8404521866083984629593440128119862089",
"99133310780563828978719478026243020695",
"294218342844689681484611504057682437036"
],
"threshold": 0.9
},
"signature_type": "Line",
"target": {
"file": "fs/smb/server/smb2pdu.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cce57cd8c5dead24127cf2308fdd60fcad2d6ba6",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-1e30b209",
"digest": {
"length": 294.0,
"function_hash": "192398793024694815669275777632824046261"
},
"signature_type": "Function",
"target": {
"file": "fs/smb/server/smb2pdu.c",
"function": "alloc_preauth_hash"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cce57cd8c5dead24127cf2308fdd60fcad2d6ba6",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-2d18aff7",
"digest": {
"length": 294.0,
"function_hash": "192398793024694815669275777632824046261"
},
"signature_type": "Function",
"target": {
"file": "fs/smb/server/smb2pdu.c",
"function": "alloc_preauth_hash"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca8bed31edf728a662ef9d6f39f50e7a7dc2b5ad",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-4c24eba6",
"digest": {
"length": 1181.0,
"function_hash": "166258855410913138801266803317107526426"
},
"signature_type": "Function",
"target": {
"file": "fs/smb/server/smb2pdu.c",
"function": "smb2_session_logoff"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8f216b33a5e1b3489c073b1ea1b3d7cb63c8dc4d",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-5dac30da",
"digest": {
"length": 841.0,
"function_hash": "34318263936675239701043990964831082586"
},
"signature_type": "Function",
"target": {
"file": "fs/smb/server/mgmt/user_session.c",
"function": "destroy_previous_session"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cce57cd8c5dead24127cf2308fdd60fcad2d6ba6",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-6494f613",
"digest": {
"line_hashes": [
"297004126756288227908285474675522726703",
"268659658837504198401863032526307706032",
"296624723961167180803562079528672614966",
"305992643832729861349185135912817091989",
"237716553558632709093956764661326776463",
"330562563618925551574172467480594720498",
"283338264937735944827811546257209429354",
"105309349186937946931560644591162732123",
"207897301114757964331025186930230631017",
"188280945983518673268505405196069810786",
"327422833182963144665463407599434122618",
"54690712854944189062554638213604010981",
"267450405378082489665943207360784785230",
"87180532630101454121491995230000699392",
"195554818792450739061977712802667231779",
"8404521866083984629593440128119862089",
"99133310780563828978719478026243020695",
"294218342844689681484611504057682437036"
],
"threshold": 0.9
},
"signature_type": "Line",
"target": {
"file": "fs/smb/server/smb2pdu.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8f216b33a5e1b3489c073b1ea1b3d7cb63c8dc4d",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-6ffe6786",
"digest": {
"line_hashes": [
"325448000465391200100892215415955313038",
"21027551650952136140564420539977572300",
"318944161087451046256217667886885275348",
"129819164659489964156793981930181478976",
"258441204198463208476705604174028848564",
"247942568155215386677883202851520230913",
"175447026143323302902636364560442388817",
"264541093609604709744525843454733088761",
"339565361653632832701298007524429225103"
],
"threshold": 0.9
},
"signature_type": "Line",
"target": {
"file": "fs/smb/server/mgmt/user_session.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cce57cd8c5dead24127cf2308fdd60fcad2d6ba6",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-728b6b62",
"digest": {
"length": 5356.0,
"function_hash": "91678965444341212030254614913153855375"
},
"signature_type": "Function",
"target": {
"file": "fs/smb/server/smb2pdu.c",
"function": "smb2_sess_setup"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8f216b33a5e1b3489c073b1ea1b3d7cb63c8dc4d",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-752c6ad7",
"digest": {
"length": 856.0,
"function_hash": "174818639193327642443409448044413801833"
},
"signature_type": "Function",
"target": {
"file": "fs/smb/server/mgmt/user_session.c",
"function": "destroy_previous_session"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b8eb243e670ecf30e91524dd12f7260dac07d335",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-7b724c72",
"digest": {
"line_hashes": [
"40640551838881666992412891435356750114",
"287445069216143970143252157146317153442",
"272432220197545348692215718554704739346",
"200796643468251471636356344036150090181",
"114625347888109672118197518536968378968",
"158215045584098059507582942883917511226",
"328299363384410295763884869006539661562",
"113803501980142141196269119362031329675",
"244647404035860198967322688899819607806",
"19240269759446072652502041473946465172"
],
"threshold": 0.9
},
"signature_type": "Line",
"target": {
"file": "fs/smb/server/connection.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca8bed31edf728a662ef9d6f39f50e7a7dc2b5ad",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-82805734",
"digest": {
"length": 5356.0,
"function_hash": "91678965444341212030254614913153855375"
},
"signature_type": "Function",
"target": {
"file": "fs/smb/server/smb2pdu.c",
"function": "smb2_sess_setup"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b8eb243e670ecf30e91524dd12f7260dac07d335",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-90f398e6",
"digest": {
"length": 301.0,
"function_hash": "93556800727486564952528467828972704206"
},
"signature_type": "Function",
"target": {
"file": "fs/smb/server/smb2pdu.c",
"function": "alloc_preauth_hash"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b8eb243e670ecf30e91524dd12f7260dac07d335",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-943189c5",
"digest": {
"length": 856.0,
"function_hash": "174818639193327642443409448044413801833"
},
"signature_type": "Function",
"target": {
"file": "fs/smb/server/mgmt/user_session.c",
"function": "destroy_previous_session"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c8b5b7c5da7d0c31c9b7190b4a7bba5281fc4780",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-9463f26a",
"digest": {
"line_hashes": [
"40640551838881666992412891435356750114",
"287445069216143970143252157146317153442",
"272432220197545348692215718554704739346",
"200796643468251471636356344036150090181",
"114625347888109672118197518536968378968",
"158215045584098059507582942883917511226",
"328299363384410295763884869006539661562",
"113803501980142141196269119362031329675",
"244647404035860198967322688899819607806",
"19240269759446072652502041473946465172"
],
"threshold": 0.9
},
"signature_type": "Line",
"target": {
"file": "fs/smb/server/connection.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8f216b33a5e1b3489c073b1ea1b3d7cb63c8dc4d",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-95364bbc",
"digest": {
"length": 856.0,
"function_hash": "174818639193327642443409448044413801833"
},
"signature_type": "Function",
"target": {
"file": "fs/smb/server/mgmt/user_session.c",
"function": "destroy_previous_session"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca8bed31edf728a662ef9d6f39f50e7a7dc2b5ad",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-a5e205a3",
"digest": {
"length": 1181.0,
"function_hash": "166258855410913138801266803317107526426"
},
"signature_type": "Function",
"target": {
"file": "fs/smb/server/smb2pdu.c",
"function": "smb2_session_logoff"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c8b5b7c5da7d0c31c9b7190b4a7bba5281fc4780",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-a60beb6f",
"digest": {
"length": 5355.0,
"function_hash": "141749231558801172115546232139565089353"
},
"signature_type": "Function",
"target": {
"file": "fs/smb/server/smb2pdu.c",
"function": "smb2_sess_setup"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca8bed31edf728a662ef9d6f39f50e7a7dc2b5ad",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-a7f397de",
"digest": {
"line_hashes": [
"297004126756288227908285474675522726703",
"268659658837504198401863032526307706032",
"296624723961167180803562079528672614966",
"305992643832729861349185135912817091989",
"237716553558632709093956764661326776463",
"330562563618925551574172467480594720498",
"283338264937735944827811546257209429354",
"105309349186937946931560644591162732123",
"207897301114757964331025186930230631017",
"188280945983518673268505405196069810786",
"327422833182963144665463407599434122618",
"54690712854944189062554638213604010981",
"267450405378082489665943207360784785230",
"87180532630101454121491995230000699392",
"195554818792450739061977712802667231779",
"8404521866083984629593440128119862089",
"99133310780563828978719478026243020695",
"294218342844689681484611504057682437036"
],
"threshold": 0.9
},
"signature_type": "Line",
"target": {
"file": "fs/smb/server/smb2pdu.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b8eb243e670ecf30e91524dd12f7260dac07d335",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-c06d3f1d",
"digest": {
"length": 1152.0,
"function_hash": "167923822034292053378373733097966088805"
},
"signature_type": "Function",
"target": {
"file": "fs/smb/server/smb2pdu.c",
"function": "smb2_session_logoff"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@cce57cd8c5dead24127cf2308fdd60fcad2d6ba6",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-c6982b7a",
"digest": {
"length": 5356.0,
"function_hash": "91678965444341212030254614913153855375"
},
"signature_type": "Function",
"target": {
"file": "fs/smb/server/smb2pdu.c",
"function": "smb2_sess_setup"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c8b5b7c5da7d0c31c9b7190b4a7bba5281fc4780",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-ca0fb13e",
"digest": {
"line_hashes": [
"40640551838881666992412891435356750114",
"287445069216143970143252157146317153442",
"272432220197545348692215718554704739346",
"200796643468251471636356344036150090181",
"114625347888109672118197518536968378968",
"158215045584098059507582942883917511226",
"328299363384410295763884869006539661562",
"113803501980142141196269119362031329675",
"244647404035860198967322688899819607806",
"19240269759446072652502041473946465172"
],
"threshold": 0.9
},
"signature_type": "Line",
"target": {
"file": "fs/smb/server/connection.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c8b5b7c5da7d0c31c9b7190b4a7bba5281fc4780",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-cf07e901",
"digest": {
"length": 301.0,
"function_hash": "93556800727486564952528467828972704206"
},
"signature_type": "Function",
"target": {
"file": "fs/smb/server/smb2pdu.c",
"function": "alloc_preauth_hash"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8f216b33a5e1b3489c073b1ea1b3d7cb63c8dc4d",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-d9bc64b1",
"digest": {
"line_hashes": [
"40640551838881666992412891435356750114",
"287445069216143970143252157146317153442",
"272432220197545348692215718554704739346",
"200796643468251471636356344036150090181",
"114625347888109672118197518536968378968",
"158215045584098059507582942883917511226",
"328299363384410295763884869006539661562",
"113803501980142141196269119362031329675",
"244647404035860198967322688899819607806",
"19240269759446072652502041473946465172"
],
"threshold": 0.9
},
"signature_type": "Line",
"target": {
"file": "fs/smb/server/connection.h"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b8eb243e670ecf30e91524dd12f7260dac07d335",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-e9dc4b08",
"digest": {
"length": 856.0,
"function_hash": "174818639193327642443409448044413801833"
},
"signature_type": "Function",
"target": {
"file": "fs/smb/server/mgmt/user_session.c",
"function": "destroy_previous_session"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8f216b33a5e1b3489c073b1ea1b3d7cb63c8dc4d",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-f31b9257",
"digest": {
"length": 301.0,
"function_hash": "93556800727486564952528467828972704206"
},
"signature_type": "Function",
"target": {
"file": "fs/smb/server/smb2pdu.c",
"function": "alloc_preauth_hash"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c8b5b7c5da7d0c31c9b7190b4a7bba5281fc4780",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-f4ef8720",
"digest": {
"length": 1152.0,
"function_hash": "167923822034292053378373733097966088805"
},
"signature_type": "Function",
"target": {
"file": "fs/smb/server/smb2pdu.c",
"function": "smb2_session_logoff"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca8bed31edf728a662ef9d6f39f50e7a7dc2b5ad",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-f83b5e90",
"digest": {
"line_hashes": [
"297004126756288227908285474675522726703",
"268659658837504198401863032526307706032",
"51448650403117895317813221185544537069",
"289873519735553229074859803961269895940",
"237716553558632709093956764661326776463",
"130979960009992921730539082423788934756",
"217046446482590909808361427330581534764",
"249667312923185645835762253499634725836",
"335881720498473020984678720935303353685",
"335590987076451830758487913687396859075",
"327422833182963144665463407599434122618",
"54690712854944189062554638213604010981",
"267450405378082489665943207360784785230",
"87180532630101454121491995230000699392",
"195554818792450739061977712802667231779",
"8404521866083984629593440128119862089",
"99133310780563828978719478026243020695",
"294218342844689681484611504057682437036"
],
"threshold": 0.9
},
"signature_type": "Line",
"target": {
"file": "fs/smb/server/smb2pdu.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ca8bed31edf728a662ef9d6f39f50e7a7dc2b5ad",
"signature_version": "v1",
"deprecated": false
},
{
"id": "CVE-2025-22037-f9396a9c",
"digest": {
"line_hashes": [
"297004126756288227908285474675522726703",
"268659658837504198401863032526307706032",
"296624723961167180803562079528672614966",
"305992643832729861349185135912817091989",
"237716553558632709093956764661326776463",
"330562563618925551574172467480594720498",
"283338264937735944827811546257209429354",
"105309349186937946931560644591162732123",
"207897301114757964331025186930230631017",
"188280945983518673268505405196069810786",
"327422833182963144665463407599434122618",
"54690712854944189062554638213604010981",
"267450405378082489665943207360784785230",
"87180532630101454121491995230000699392",
"195554818792450739061977712802667231779",
"8404521866083984629593440128119862089",
"99133310780563828978719478026243020695",
"294218342844689681484611504057682437036"
],
"threshold": 0.9
},
"signature_type": "Line",
"target": {
"file": "fs/smb/server/smb2pdu.c"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c8b5b7c5da7d0c31c9b7190b4a7bba5281fc4780",
"signature_version": "v1",
"deprecated": false
}
]